DF-4456
radeon_crtc_do_set_base returns 'false' (0 = success) for unsupported framebuffer formats
Summary
Both unsupported-format switch defaults 'return false' - and false == 0 == success to every caller. Scanout registers never programmed yet the modeset reports success, leaving stale framebuffer scanned out. DRM-master-only path. Return -EINVAL fix.
Discussion (0)
PoC verification
Evidence pack
findings/poc/DF-4456 · 1 files| File | Type | Description | Size | |
|---|---|---|---|---|
| verdict.json | file | 818 B | view raw |
Fix verification
not_testablebaseline no→ patch + rebuild →patched clean
not_testable: no radeon GPU on guest
fix in finding markdown
per-fix-DF-4456
Confirmed kernel references
Detail
Exploit chain
[]
Evidence (decisive lines)
return false == 0 == success in an int-returning function. Return -EINVAL fix in finding markdown.
Verdict
not_run: Info correctness finding
No comments yet.